$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa File: d691d77a-2a2e-3631-9e05-38a798f0b995.roa (raw, json) Hash identifier: dNhzk1f39hH41DXSZ4lr4gRi1PnYpAYim+8R7DUxdXU= Subject key identifier: F7:3A:A2:79:B8:F6:07:83:EC:97:B6:9C:19:BA:35:7E:4D:7B:8D:A1 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F3FAD2DD811A88046F057BE40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 29802 IP address blocks: 91.191.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2d:d8:11:a8:80:46:f0:57:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=e1418cd2-be25-4b5f-a0c6-77254c8fcfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:2c:36:bd:5f:d4:86:02:e1:bc:8d:27:6a: c8:23:31:3f:f1:44:3c:0c:68:e6:40:4f:94:18:45: a0:5e:bf:c9:77:bf:f7:d9:cb:96:fc:5f:57:11:b2: ac:2a:28:7f:d5:05:11:40:67:1a:0e:6f:4c:04:b6: 5d:35:99:fc:d9:b5:4c:53:a5:14:9b:83:96:7e:21: 0b:f3:d4:ab:13:70:9d:d0:e4:f5:31:86:bc:65:d3: 69:47:8c:43:b2:92:64:a9:a0:db:49:02:c4:5f:23: ed:7c:6f:b9:1d:4d:35:07:57:85:a5:94:19:01:e8: 8b:8a:22:f2:04:67:8b:45:f3:80:e0:21:cd:1e:16: 04:fc:fa:6f:c3:f9:91:39:4f:0e:56:aa:c3:42:84: a9:b5:2b:9b:1d:17:e9:9e:a4:96:6d:a9:2e:00:2e: 8e:29:0d:65:58:a9:f8:ec:41:09:78:24:45:6f:f9: c0:1e:c3:95:56:b5:a9:f4:f4:9c:1d:7a:98:d4:3d: f6:b3:55:1d:87:1a:8b:56:ef:2a:a5:e5:86:d5:14: b0:27:a4:5f:9b:70:0c:13:6c:5c:64:81:d4:3f:f9: 9b:34:38:1a:9d:b2:b3:2d:01:0e:1a:f0:fe:e2:85: 60:70:c4:56:c1:0a:90:15:a4:56:0e:91:d6:0a:30: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3A:A2:79:B8:F6:07:83:EC:97:B6:9C:19:BA:35:7E:4D:7B:8D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d691d77a-2a2e-3631-9e05-38a798f0b995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:95:fe:63:83:48:70:48:b8:e7:7e:81:a7:e7:0d:e6:1a:29: 07:e2:4f:30:1f:a0:2e:e9:0e:c8:48:3e:c7:ea:44:34:3e:ac: 81:e4:40:89:d0:68:16:b1:b8:18:47:c4:48:b9:4a:ee:9f:54: be:8f:93:1b:30:e7:5f:34:36:7b:68:17:3c:c8:c4:37:17:0f: f8:09:7f:18:98:ef:fc:83:d6:b0:fe:63:d7:19:d4:5f:dd:55: b1:51:48:51:0b:3a:45:57:9e:da:66:2b:37:58:86:4e:48:39: fc:92:6f:9c:43:c8:c6:33:40:ce:54:fe:7f:70:7c:5b:71:12: 0e:11:18:7f:7a:3d:12:35:1e:e7:85:15:d3:f8:90:34:88:ce: 7f:4d:3a:d0:0d:bb:3c:fa:37:e5:04:df:e5:5e:72:1d:9a:74: b9:ed:4f:e1:43:4d:85:e4:9e:99:7c:bb:15:9a:c9:4b:cd:83: de:f1:70:e7:6a:90:8f:33:2b:7e:22:e5:ac:b4:2f:ac:f0:f2: f9:69:42:5e:6e:8d:ec:06:fd:99:60:d3:d7:82:80:85:8a:e2: c0:d7:75:56:b5:87:50:ac:de:d6:d9:4c:ec:01:97:04:2c:8e: 3c:9c:42:47:ac:a4:d5:a1:79:9b:07:a5:b9:bc:25:63:a5:b9: 3f:79:83:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rS3YEaiARvBXvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTE0MThjZDItYmUyNS00YjVmLWEwYzYtNzcyNTRjOGZjZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uEsNr1f1IYC4byNJ2rIIzE/8UQ8DGjmQE+U GEWgXr/Jd7/32cuW/F9XEbKsKih/1QURQGcaDm9MBLZdNZn82bVMU6UUm4OWfiEL 89SrE3Cd0OT1MYa8ZdNpR4xDspJkqaDbSQLEXyPtfG+5HU01B1eFpZQZAeiLiiLy BGeLRfOA4CHNHhYE/Ppvw/mROU8OVqrDQoSptSubHRfpnqSWbakuAC6OKQ1lWKn4 7EEJeCRFb/nAHsOVVrWp9PScHXqY1D32s1UdhxqLVu8qpeWG1RSwJ6Rfm3AME2xc ZIHUP/mbNDganbKzLQEOGvD+4oVgcMRWwQqQFaRWDpHWCjCmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc6onm49geD7Je2nBm6NX5Ne42hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDY5MWQ3N2EtMmEyZS0z NjMxLTllMDUtMzhhNzk4ZjBiOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqV/mODSHBIuOd+gafnDeYaKQfiTzAfoC7pDshIPsfqRDQ+rIHkQInQ aBaxuBhHxEi5Su6fVL6Pkxsw5180NntoFzzIxDcXD/gJfxiY7/yD1rD+Y9cZ1F/d VbFRSFELOkVXntpmKzdYhk5IOfySb5xDyMYzQM5U/n9wfFtxEg4RGH96PRI1HueF FdP4kDSIzn9NOtANuzz6N+UE3+Vech2adLntT+FDTYXknpl8uxWayUvNg97xcOdq kI8zK34i5ay0L6zw8vlpQl5ujewG/Zlg09eCgIWK4sDXdVa1h1Cs3tbZTOwBlwQs jjycQkespNWheZsHpbm8JWOluT95gxs= -----END CERTIFICATE-----Generated at Sat Sep 26 13:41:15 2026 by rpki-client